Hackers phish finance orgs using trojanized Minesweeper clone
Hackers are using malicious scripts hidden in code from a Python clone of Microsoft's classic Minesweeper game to target financial institutions in the US and Europe.
The attacks are attributed by Ukraine's CSIRT-NBU and CERT-UA to a threat actor known as 'UAC-0188,' who is hiding Python scripts that download and install the SuperOps RMM with the help of legal code.
A genuine remote management tool that provides distant actors with direct access to the hacked systems is called Superops RMM.
According to CERT-UA, investigations conducted after this attack was first discovered turned up at least five possible breaches caused by the same files in financial and insurance organizations in the US and Europe read more Hackers phish finance orgs using trojanized Minesweeper clone.
Get ...